See docs/security.md for core security principles and operational guidance.

For responsible disclosure, please open a private security advisory in GitHub.